Alternatives and similar repositories for ARDvark

Users that are interested in ARDvark are comparing it to the libraries listed below

• its-a-feature / macos-popups
  Catalog Red Team techniques that cause popups in various macOS versions
  ☆15Updated 9 months ago
• WithSecureLabs / macOSTriageCollectionScript
  A triage data collection script for macOS
  ☆28Updated 4 years ago
• ahhh / macOS_profiles
  a collection of profiles for macOS designed for penetration testing or red teaming
  ☆34Updated 6 years ago
• brokensound77 / toruk
  Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data
  ☆13Updated 6 years ago
• cedowens / Mythic-Macro-Generator
  Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens
  ☆47Updated 4 years ago
• mattreduce / eddie
  Eddie Vetter - triage macOS applications for security research
  ☆16Updated 4 years ago
• antman1p / PrintTCCdb
  JXA script for Mythic that prints the TCC.db
  ☆15Updated 4 years ago
• dfirlabs / ntfs-specimens
  NTFS file system specimens
  ☆13Updated 2 years ago
• OTRF / bloodhound-notebooks
  Notebooks created to attack and secure Active Directory environments
  ☆27Updated 5 years ago
• its-a-feature / macOSCameraCapture
  Simple CLI utility to save off an image from every webcam hooked into a mac
  ☆14Updated 4 years ago
• MythicAgents / typhon
  Payload designed for targeting Jamf enrolled devices.
  ☆38Updated 2 years ago
• cedowens / Persistent-Swift
  A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…
  ☆32Updated 4 years ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆16Updated last year
• nccgroup / UninstalledAppCanary
  A Canary which fires when uninstalled
  ☆34Updated 4 years ago
• trustedsec / RisingSun
  RisingSun: Decoding SUNBURST C2 to identify infected hosts without network telemetry.
  ☆10Updated 4 years ago
• WithSecureLabs / FLAIR
  F-Secure Lightweight Acqusition for Incident Response (FLAIR)
  ☆17Updated 4 years ago
• antman1p / JXA_Proc_Tree
  A JXA script for enumerating running processes, printed out in a json, parent-child tree.
  ☆13Updated 3 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 10 years ago
• its-a-feature / KeytabParser
  Python script to parse Keytab files for macOS or *nix (typically /etc/krb5.keytab)
  ☆36Updated 6 years ago
• rgeoghan / app-password-persistence
  Using Microsoft 365 App Passwords for persistence
  ☆23Updated 4 years ago
• secgroundzero / ossem_modular
  OSSEM Modular
  ☆27Updated 5 years ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 5 years ago
• cocaman / yara-scan-service
  Repository for scripts and tips for "Yara Scan Service"
  ☆20Updated 2 years ago
• surbo / OVERFLOW
  Microsoft Flow Attack Framework
  ☆23Updated 5 years ago
• stvemillertime / Absolutely-Positively-NOT-Hacking-Back-with-Pcap
  Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control No…
  ☆22Updated 6 years ago
• its-a-feature / loginItemManipulator
  ☆15Updated 4 years ago
• its-a-feature / HealthInspector
  JXA situational awareness helper by simply reading specific files on a filesystem
  ☆79Updated 3 years ago
• ReconInfoSec / adversary-emulation-map
  Creates an ATT&CK Navigator map of an Adversary Emulation Plan
  ☆17Updated 3 years ago
• dfaram7 / pptshots
  Finding sensitive information in the trimmed parts of cropped images
  ☆30Updated 3 years ago
• fastlorenzo / redelk-kibana-app
  Kibana app for RedELK
  ☆17Updated 2 years ago